ThreatDown Cybersecurity

Endpoint protection, detection and 24/7 managed response for South African businesses, supplied and managed by an authorised ThreatDown partner.

Authorised Partner

Business security from ThreatDown, by Malwarebytes

Subtle Consulting is an authorised ThreatDown managed service provider (MSP) partner. Subtle Technologies, its ICT division, supplies, deploys and manages ThreatDown on Windows, macOS and Linux devices, all from one cloud console.

You get one local point of contact for licensing, rollout, monitoring and renewals. Security is quoted alongside your hardware and Microsoft 365 purchases, so it can be protecting new devices from the day they arrive.

Why It Matters

Ransomware in South Africa

Figures from Sophos, State of Ransomware in South Africa 2026 (a survey of 135 IT and cybersecurity leaders), as reported by IT-Online, 18 September 2026.

63%

of ransomware incidents ended with the victim's data encrypted.

27%

of attacks started with compromised credentials, the most common cause.

25%

exploited unpatched vulnerabilities. Another 22% started with a malicious email.

40%

of affected organisations recovered within a week. The rest took longer.

Products & Pricing

ThreatDown price list

All products are licensed per device per month and billed monthly. We quote in rand, excluding VAT, based on your device count and the protection you choose.

Endpoint protection

Level 1

Endpoint Protection (EP)

Next-generation antivirus that blocks malware, ransomware and exploits before they run. Suits businesses that want strong, low-maintenance prevention.

Per device / month Request a quote →

Level 2

Endpoint Detection & Response (EDR)

Everything in EP, plus continuous monitoring, threat hunting, isolation of infected devices and ransomware rollback. Suits firms with IT staff who can act on alerts.

Per device / month Request a quote →

Level 3

Managed Detection & Response (MDR)

EDR watched 24/7 by ThreatDown's security analysts, who investigate and respond to threats for you. Suits businesses with no one watching alerts after hours.

Per device / month Request a quote →

Servers & mobile

Endpoint Protection for Servers

Prevention-level protection for Windows and Linux servers.

Per server / month Request a quote →

EDR for Servers

Detection, isolation and response for the servers your business runs on.

Per server / month Request a quote →

Mobile Security for Business

Protection for company Android and iOS phones and tablets, managed from the same console.

Per device / month Request a quote →

Add-ons

Email Security

Filters phishing, malicious links and attachments before they reach inboxes.

On quote

DNS Filtering

Blocks access to malicious and unwanted websites at the network layer.

On quote

Vulnerability & Patch Management

Finds missing updates across operating systems and applications, and deploys the patches.

On quote

Incident Response

Removes threats and remediates devices after an attack is detected.

On quote

Not sure which level fits? Tell us how many laptops, desktops, servers and phones you have and whether anyone monitors security alerts. We'll recommend a package and send an itemised quote.

How We Deliver

From quote to protected devices

Assess

We count your devices and servers, review your current antivirus and Microsoft 365 licensing, and ask who responds to alerts today.

Quote

You receive an itemised per-device monthly quote with a clear recommendation between EP, EDR and MDR.

Deploy

We roll out the ThreatDown agent, replace legacy antivirus where needed, and confirm every device reports into the console.

Manage & renew

We adjust licence counts as your team changes, keep you informed, and handle monthly billing and renewals.

Compliance & Insurance

Security that supports your obligations

POPIA

Section 19 of the Protection of Personal Information Act requires reasonable technical measures to protect personal information. Endpoint protection, patching and monitoring are practical measures that support that obligation.

Cyber insurance

Many SME cyber insurance applications ask about antivirus, patching and security monitoring. ThreatDown helps you meet those technical controls. Insurers still assess other practices, such as multi-factor authentication and backups, and cover is always at their discretion.

Microsoft 365 users

Microsoft 365 Business Premium includes Microsoft Defender for Business. If you already have it, you may not need endpoint protection, but you may still benefit from 24/7 MDR or patch management. We'll tell you honestly.

Mixed environments

One ThreatDown console covers Windows, macOS and Linux devices and servers, so mixed fleets need only one product.

Get a ThreatDown quote

Select Cybersecurity Solutions on the quote form and include your device count. We respond within one business day.

Request a Quote →

ThreatDown and Malwarebytes are trademarks of Malwarebytes Inc. Products are supplied under Subtle Consulting's ThreatDown partner agreement, subject to vendor terms.